USNO is seeing an apparent coordinated denial of service attack on NTP originating with the following IPs: 220.117.53.67; 218.92.115.152; 114.40.28.224; 218.201.21.194. I recommend that you block 220.0.0.0/8, 218.0.0.0/8, and 114.0.0.0/8. There will likely be more to follow. These appear to originate on APNIC (Asian Pacific).
Currently we are seeing many tens of thousands of packets per second coming in. R.Schmidt Time Service Department US Naval Observatory 29 November 2011 _______________________________________________ questions mailing list [email protected] http://lists.ntp.org/listinfo/questions
